15.0.4 on xps 13 9343 does not boot with uefi secureboot

Bug #1463869 reported by gobble
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
shim (Ubuntu)
Expired
Undecided
Unassigned

Bug Description

I just wiped off Windows 8 from my new Dell XPS 13 9343 and did a clean install of Ubuntu 15.0.4. It did not boot in UEFI secure mode. I had to disable secureboot to boot Ubuntu. Not sure if this is because Dell has not embedded the CA cert signed by Microsoft in this machine and used to sign the first-stage UEFI bootloader/shim or if its actually a problem that can be fixed by using another key to sign the shim? DELL does supply a developer edition of XPS 13 with Ubuntu and perhaps they use a bootloader with different keys than whats in the standard shim? Let me know if I should open a ticket with DELL instead or if you can check the DELL version of Ubuntu about what keys they have used and supply that in the default shim?

Apologies if the problem description is inaccurate or confusing due to some incorrect assumption. Feel free to correct my understanding of it.

G0bble

Revision history for this message
Steve Langasek (vorlon) wrote :

You said that you did a clean install of Ubuntu 15.04. Does this mean you were able to boot Ubuntu 15.04 install media with SecureBoot enabled, but the installed system did not boot? Or was SecureBoot not enabled at the time you installed?

Please show the output of 'efibootmgr -v' on the installed system.

Changed in shim (Ubuntu):
status: New → Incomplete
Revision history for this message
gobble (gobbledegeek) wrote :

Hi

I may have mistakenly pointed to grubx64.efi instead of shimx64.efi in the bios settings. It is working in secureboot now. Please close this bug with my apologies - I am new to uefi.

For the record here is the output (with all the mistakes I typed in earlier ):

efibootmgr -v
BootCurrent: 0005
Timeout: 0 seconds
BootOrder: 0006,0005
Boot0000* Windows Boot Manager HD(1,800,fa000,469dab16-797f-46c5-a262-f05e27698f33)File(\EFI\Microsoft\Boot\bootmgfw.efi)WINDOWS.........x...B.C.D.O.B.J.E.C.T.=.{.9.d.e.a.8.6.2.c.-.5.c.d.d.-.4.e.7.0.-.a.c.c.1.-.f.3.2.b.3.4.4.d.4.7.9.5.}...d...............
Boot0001* ubuntu HD(1,800,100000,fadcf1b7-8d95-4cf3-93c5-2b50e105d8c5)File(\EFI\ubuntu\shimx64.efi)
Boot0002* VIVID ACPI(a0341d0,0)PCI(1f,2)SATA(3,ffff,0)HD(1,800,100000,fadcf1b7-8d95-4cf3-93c5-2b50e105d8c5)File(\EFI\ubuntu\grubx64.efi)
Boot0003* Ubuntu ACPI(a0341d0,0)PCI(1f,2)SATA(3,ffff,0)HD(1,800,100000,fadcf1b7-8d95-4cf3-93c5-2b50e105d8c5)File(\EFI\ubuntu\grubx64.efi)
Boot0004 Ubuntu ACPI(a0341d0,0)PCI(1d,0)USB(0,0)USB(0,0)HD(1,2000,1d75800,00000000)File(\EFI\BOOT\BOOTx64.EFI)
Boot0005* Ubuntu ACPI(a0341d0,0)PCI(1f,2)SATA(3,ffff,0)HD(1,800,100000,fadcf1b7-8d95-4cf3-93c5-2b50e105d8c5)File(\EFI\ubuntu\shimx64.efi)

Thanks for your valuable time,
G0bble

Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for shim (Ubuntu) because there has been no activity for 60 days.]

Changed in shim (Ubuntu):
status: Incomplete → Expired
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.